Unit 42 found only 12 of 405 AI-enabled malware samples on production endpoints, exposing the gap between public repositories and operational activity.